Ubuntu
freetype package

freetype 2.11.1+dfsg-1ubuntu0.1 source package in Ubuntu

Changelog

freetype (2.11.1+dfsg-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow in sfnt_init_face
    - debian/patches/CVE-2022-27404.patch: avoid invalid face index in
      src/sfnt/sfobjs.c, src/sfnt/sfwoff2.c.
    - CVE-2022-27404
  * SECURITY UPDATE: Segmentation violation in FNT_Size_Request
    - debian/patches/CVE-2022-27405.patch: properly guard face_index in
      src/base/ftobjs.c.
    - CVE-2022-27405
  * SECURITY UPDATE: Segmentation violation in FT_Request_Size
    - debian/patches/CVE-2022-27406.patch: guard face->size in
      src/base/ftobjs.c.
    - CVE-2022-27406
  * SECURITY UPDATE: Heap-based buffer overflow in ftbench demo
    - debian/patches/CVE-2022-31782.patch: check the number of glyphs in
      ft2demos/src/ftbench.c.
    - CVE-2022-31782

 -- Marc Deslauriers <email address hidden>  Tue, 19 Jul 2022 11:13:32 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
freetype_2.11.1+dfsg.orig-ft2demos.tar.xz 251.2 KiB c60620d49d0f16d95586eb868c01b129569409e6cfdcb87a78e0482a12604672
freetype_2.11.1+dfsg.orig-ft2demos.tar.xz.asc 195 bytes d911a95830c50efcf60398e51db4ec307bbf4d24168377b515aded0611e977c0
freetype_2.11.1+dfsg.orig-ft2docs.tar.xz 1.9 MiB 755e29908093c19138a38775784b0accf7e838ffa28a25b8722b3dfe651d80fa
freetype_2.11.1+dfsg.orig-ft2docs.tar.xz.asc 195 bytes 67cbc2f192460dc4d46129e7debe55b40a9fa6e224ffeed70b4cf397ebaccab5
freetype_2.11.1+dfsg.orig.tar.xz 1.9 MiB ef93541237834445eb7ff355e7d4139d48844f9c977a485dea1316df54994473
freetype_2.11.1+dfsg-1ubuntu0.1.debian.tar.xz 40.6 KiB ee983664af3d2bf6028526fe35e4758cf086dceb7c569baecc060f273db445a3
freetype_2.11.1+dfsg-1ubuntu0.1.dsc 3.7 KiB 08d431bc21e25a1252bff975495e9af73e3c1914a47e42fb49fe768e2040fa87

View changes file

Binary packages built by this source

freetype2-demos: FreeType 2 demonstration programs

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on providing small,
 efficient and ubiquitous products.
 .
 This package contains some demonstration programs and utilities
 that showcase the features of the FreeType 2 font engine.

freetype2-demos-dbgsym: debug symbols for freetype2-demos
freetype2-doc: FreeType 2 font engine, development documentation

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on providing small,
 efficient and ubiquitous products.
 .
 This package contains the FreeType 2 development documentation.

libfreetype-dev: FreeType 2 font engine, development files

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on providing small,
 efficient and ubiquitous products.
 .
 This package contains all of the supplementary files you need to develop your
 own programs using the FreeType 2 library.

libfreetype6: FreeType 2 font engine, shared library files

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on providing small,
 efficient and ubiquitous products.
 .
 The FreeType 2 library is their new software font engine. It has been
 designed to provide the following important features:
  * A universal and simple API to manage font files
  * Support for several font formats through loadable modules
  * High-quality anti-aliasing
  * High portability & performance
 .
 Supported font formats include:
  * TrueType files (.ttf) and collections (.ttc)
  * Type 1 font files both in ASCII (.pfa) or binary (.pfb) format
  * Type 1 Multiple Master fonts. The FreeType 2 API also provides
    routines to manage design instances easily
  * Type 1 CID-keyed fonts
  * OpenType/CFF (.otf) fonts
  * CFF/Type 2 fonts
  * Adobe CEF fonts (.cef), used to embed fonts in SVG documents with
    the Adobe SVG viewer plugin.
  * Windows FNT/FON bitmap fonts
 .
 This package contains the files needed to run programs that use the
 FreeType 2 library.

libfreetype6-dbgsym: debug symbols for libfreetype6
libfreetype6-dev: FreeType 2 font engine, development files (transitional package)

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on providing small,
 efficient and ubiquitous products.
 .
 This package contains all of the supplementary files you need to develop your
 own programs using the FreeType 2 library.
 .
 This is a transitional package. It can safely be removed.